It never ceases to amaze me that vehicle companies put so much time and expense creating such technologically advanced cars, but with a key entry system that is about as secure as a wet paper bag.

@DanielBulyovcsity

6 ай бұрын

Good for the market. The (ex)owner will buy a new one.

@BillAnt

6 ай бұрын

It could be mitigated to a degree by reducing the range of both the car's and key fob's to say 20 feet. There's really no good reason to be longer than that.

@timlc

6 ай бұрын

Or better still, simply just open the car door with the physical key. You have to walk to the car anyway so no time is lost! I guess it’s because even that is too much effort these days!

@DanielBulyovcsity

6 ай бұрын

@@timlc its kind of a big deal if you have kids and hands full all the time

@ThomasConover

6 ай бұрын

Well, as a software engineer with security as my main field; there are ZERO education in proper secure design of digital locks when you educate yourself as a software engineer at tech universities. Zero! But the entire world expect you to be a security genius as an engineer. So all these security-illiterate engineers end up being “creative” and make up their own horrendously bad security solutions that only keep themselves out. 😂 fun fact to scare you even more: 100% of all digital safe locks in the entire world can be opened with a factory master code. I know this particularly well, because I developed the world’s first tempest-certified timelock-system for civilian safe-locks to prevent illegal covert governmental level Abusive break-ins done by corrupt cops and corrupt intelligence agents targeting innocent civilian wealthy people. This project has been a big eye opener for me in many fields. The world you live in is not as secure as you might think it is. 😂👍❤️

It's criminal that car makers don't put motion sensors in the keyfobs to disable them when sitting idle - would cost peanuts and eliminate relay attacks. Some makers ( VW I think) do some fancy time-of-flight stuff to check response time to prevent relay attacks.

@andykirby

7 ай бұрын

That would be a good solution.

@andrewnorris5415

7 ай бұрын

@@andykirby Stolen cars go to Africa etc. Insurance pays for a new one to go to the UK. Helps the car industry.

@johnharrison373

7 ай бұрын

​@@andykirbyFord do!

@C...G...

6 ай бұрын

good points, well presented! 👍

@lowfinger

6 ай бұрын

Later BMW and Mini fobs have the motion sensor in the key, articles reference this around 2019.

Nice one Sir. I'm writing this from the inside of -your- my Audi while listening to 20m on my new 7100 😉

@luckyguy600

3 ай бұрын

Crime does pay.

your videos are getting more and more informative and interesting as time goes on. I really look forward to your next videos especially these radio related ones. You've got great knowledge and know-how and you're teaching us all. Absolutely superb stuff!

@DavidW-nx2zs

2 ай бұрын

Pity that the right- wing sometime mis-use it to push their agenda?

Many years ago I was at a rave and wanted to get my coat because I was getting a bit cold. In in the state I was in, I managed to open three other Mini Metros before I got the right one. I still had the ultimate deterrent though: a car that no one would ever want to nick.

@ghostdog4330

7 ай бұрын

Hey, it was good enough for Diana Spencer. :D

@juliogonzo2718

7 ай бұрын

There are only so many key cuts used. Probably with worn key or tumbler ones that are close might even work. They make "tryout keys" for automotive applications which are just a bunch of different key cut patterns. Sooner or later one of them will probably open the lock.

@laulaja-7186

6 ай бұрын

… priceless! Taking that idea one step further, my old jalopy used to have a damaged battery connection. Not being familiar with the car, a thief would be unlikely to know that this “dead” car just needed to open the engine compartment and shove that battery connector back on to start.

@Bond2025

5 ай бұрын

Jesus, I had the ultimate anti-theft one, beige with rusty red fabric interior, HLS trim with a massive 1300cc engine. It was a good car in it's day as a first car, 155/65 SR12 tyres!!! ( I think). I had to replace the head gasket, went through numerous sets of front brakes, all 4 gas suspension units and connecting pipe at the rear, then the two radius arms "fell off" at the back and the rear bearings fell apart - it was a fun car, but also cheap to fix. The slimline 12band graphic EQ and 4x40Watt booster from Dixons and the Matsui 3 way shelf speakers were pinched and they left the car!!! I had even fitted a centre console with a radio, EQ and booster and tape holder in! They left my Ham International Multimode 2 that was under the switches on the right hand side, but broke the steering lock, surround and ignition switch as I think I disturbed them. The door lock had been "removed" or punched through in to the inside of the door.

@juliogonzo2718

5 ай бұрын

@@Bond2025 well at least if you got a puncture you could likely find a new tire in the lawn and garden section of a store

Ah, my old 1988 Town Car with its old fashioned metal key!

@juliogonzo2718

7 ай бұрын

My work has a scrap yard. One day about a 92 towncar came in. Wasn't too rusty and had really nice condition leather interior. Person scrapped it after buying it due to the quote for the work required to pass a safety. They put the forks of the loader through the windshield before I saw it. Man I was pissed

@denisohbrien

6 ай бұрын

my 2003 bmw still has a metal key, but was the last, one year newer and they changed to the fob. p.s. love your channel.

@glasslinger

6 ай бұрын

@@juliogonzo2718 If it wasn't wrecked and was complete that was a terrible mistake! Easily worth several thousand bucks!

I always say, if something is made more convenient for the punter, then it's even more convenient for the crook. Great vid. Love the kit.

Had a faraday pouch. It worked for a bit but then it started to let the key fob signals through. So had an old tin , lined it with tin foil and that works 100%

@heatshield

7 ай бұрын

What brand was that? I would hate to get one, test it, be confident it worked then find out it degraded and wasn’t blocking.

@BitsofSkin

7 ай бұрын

Your faraday pouch story is BS.

@DecentralEyes

6 ай бұрын

But that won’t stop the transceiver attack !?

@MrToymod

6 ай бұрын

@@BitsofSkinI keep my car keys under my foil hat!!.

@timesquare5473

6 ай бұрын

@@BitsofSkin No it's not mate, get up to speed.

Thats why i installed Trunk Monkey in my vehicle the only sure fire way to deter thieves from taking your vehicle. From the makers of Suburban Auto Group.

@rickysmith9284

Ай бұрын

Growing up I used to love trunk monkey!!!

@andrew_koala2974

24 күн бұрын

I ask the logical question after reading what you wrote: And I quote : "" i installed Trunk Monkey in my vehicle the only sure fire way to deter thieves from taking your vehicle. "" So the question is : How is installing ' Trunk Monkey ' in YOUR vehicle going to deter thieves from taking MY vehicle ? RIDDLE ME THAT greymann1384 - I would suggest that you undertake an extensive reading program to better educate yourself - study English and LEARN HOW TO ACCURATELY DESCRIBE what it is you are thinking about - AVOID AMBIGUITY AT ALL COSTS. Learn to write accurately. It is not that difficult for the educated people - but not so easy for peasants ( commonly known these days as Citi-Zens )

@greymann1384

24 күн бұрын

@@andrew_koala2974 Thank You Ken For replying, can I call you Ken you seem to be a person who would be called a Ken and may I suggest Ken that you research What levity is. Also my writing skills may not be on par with your Superb Standards of the English Language I commend you for reminding the rest of us lower classes of your Superiority and Intellectual Prowess that you possess, I hope you have a wonderful day and also lest I forget say hello to KAREN for me.

I was always told that locks only stop honest people and if they really want it, they will take it. The only thing you can realistically do is to make it very obvious that it will be more difficult to take, these people don't like wasting time.

@JamesWilliam70

6 ай бұрын

yep i also use a steering lock as a visual deterrant even though i have an immobiliser and tracker.

@W8RIT1

6 ай бұрын

@@JamesWilliam70 sometimes a solution could be free, effortless, and relatively quick...pull the fuse for the fuel pump. Car won't go without any gas supply.

@Noksus

6 ай бұрын

Most often crimes are opportunistic. If your door is unlocked then there's a much higher chance of something being stolen versus them breaking a window to get in.

@andrew_koala2974

24 күн бұрын

That is exactly right: locks are only there to stop honest people When and IF some'one' wants to get in - a LOCK will not stop them. Locks did not work on chastity belts either. One reason why DNA testing fro family connections is totally invalid and useless One does not know who had s-ex with whom and when. Just be thankful for being alive - Leave the past behind.

@iconofsin1043

17 күн бұрын

The same applies to hacking, everything is hack-able, you just make it as hard as possible so it's not worth the effort

I highly recommend a good quality Faraday pouch. I'm a mechanic and use them when working especially on hybrid or electric vehicles as you don't want an engine to start when you've drained down the oil or your fingers are in there. And you really don't want a 900 volt EV coming online. I always check the ignition switch with the key in pouch within the vehicle to insure it can't be detected.

@Noksus

6 ай бұрын

You should disconnect high voltage lines before working on EVs.... as a mechanic you should know this.

@RTMunroe

6 ай бұрын

No reason to do a master disconnect to change the oil tho

@mjh5437

6 ай бұрын

The word is actually "Ensure"...not "Insure" in this context...You`re welcome.

@Bond2025

5 ай бұрын

For anti-theft - Take the fuse out that provides power to the diagnostics socket, not many people carry a 12v battery about to power up their controllers and programmers. MOVE the diagnostics socket to a different location by extending the wires. Or you could replace the OBD2 socket for a completely different type, like an old parallel port connector off a computer (providing you have plug and socket) and make an adaptor with a plug and short lead going to the original socket. People trying to pinch the car would be going WTF! They would find some random connector and not have a clue which wire was which. You could also use a multi pin circular type. You can give the garage the small adaptor for services etc, then they can plug it in and put the OBD2 plug in the other part of it. Then I would fit a hidden switch connected up to one or more electrical circuits like the fuel pump and starter circuit. Anything to slow people down. Modern cars can be taken within minutes, even without keys. Sites sell everything people need apparently.

@gowerdave

Ай бұрын

@@mjh5437 *you're welcome. You used a 'grave' accent instead of an apostrophe.

I miss the days of a slide hammer and screw driver

@Pyjamarama11

7 ай бұрын

I miss the days of the pillory

@C...G...

6 ай бұрын

a straightened out wire coat hanger! 👍

@k1ortia

6 ай бұрын

​@@C...G...With the top corner of the door slightly bent... Apparently 😉

@journeybrook9357

6 ай бұрын

Dang! 😂😂😂

@C...G...

6 ай бұрын

@@k1ortia yrs yes, bent out using a small plastic wedge... apparently! 👍

Easy (and effective) cure, hide a kill switch in the car to disable the starter. The only way the start button will work even with a relay attack is if they 1. KNOW about the kill switch, and 2. Know where it's hidden. They might still be able to GET IN your car, but it will still BE THERE when you go out the next morning. You COULD get even fancier and ad an alarm relay to the start button, that's active when the kill switch is on that will let you know someone is attempting to take it. Then you let your friends Smith and Wesson take care of the rest.

@88Danio

6 ай бұрын

Previous owner of my old audi installed a kill switch, that allows engine to start, and kills it after about 30-60 seconds with alarm, if you don't push a hidden button. It honks before to remind you. It starts working each time after closing any door, even if engine is already running. In case of carjacking it allows supposedly armed criminal to drive off, leaving you safe. I think it was banned some time ago, because of stopping engine while riding. One can still park with momentum though, it doesn't brake.

@laulaja-7186

6 ай бұрын

Haha! The loose damaged battery connector in my old car used to serve exactly that purpose. Stealthy secret smart high tech kill switch.

@NightshiftCustom

3 ай бұрын

so like a 2 way switch that sends the power to the horn every time they hit the start button instead of the starter :)

Our local ham repeater was moved frequency to avoid jamming cars! We've now got a new 9 MHz split, and we added a notch filter on the TX for 433.920 MHz (ISM band centre) to help.

@andykirby

6 ай бұрын

Haha that's interesting 😁

@Bond2025

5 ай бұрын

There were some MOD buildings blamed for blocking entire roads of garage door openers!

Another great video. I have just purchased a brand new car today and will be having another Pandora alarm fitted asap. They are brilliant alarms but my installation can't be done straight away due to no free appointments. I purchased two Faraday cases from Amazon and they do work even standing next to the car. They are worth the £6 they cost for 2. But you can't beat the alarms.

@Bond2025

5 ай бұрын

The type of alarm you need is the one with the immobiliser that is programmed using switches in the car, so when you get in, to start it you pick a combination such as - left indicator, rear demister, right indicator twice and A/C button BEFORE it will then start the car! No one can guess the combination or start using OBD2 to get the info etc.

Great video Andy and a nice demo again of the TinySA

Security has come along way since a half inch vanity case key could open and start my Cortina from long ago

@LordGryllwotth

7 ай бұрын

I had a Peugeot 405 with a chinese lock, since previous owner lost the key. It had no steeringlock anymore, I could start the car with a coin.... I learned that when suddenly my keys fell to the floor when I was driving. I hadn't seated it far in enough to let some pin to hold the key in.

@ianmangham4570

6 ай бұрын

A penny will open most old fords 😅

@bascomnextion5639

3 ай бұрын

Any Cortina key seemed to open most other Cortina's

A good video with some really good tips on how to help secure your car for those who didn't know about this.

Brilliant info. I think I'll go out street shopping for a new car tonight.😂 I didnt know of this antenna gain attack. My keys are far away from the car but I recently bought those pouches, I must try them out.👍🍻🤠

Fantastic Info Mate. Just found ur channel thanks to Ringway Manchester 🙏 Cheerz from Down Under⚡🙏⚡

This criminal jamming action is absolutely off the scale in South Africa. There is actually warning notices on all the walls of all the shop car parks . The crims are always looking to remove the car from your possession day or night.

@GapRecordingsNamibia

7 ай бұрын

Yup, just said that to another person here who said Andy just taught the theives something new.... Some people are very ignorant in their little bubbles.

@theowink

6 ай бұрын

Banana 🍌 people

@georgeclaase2898

6 ай бұрын

Car companies could use South Africa as a testing ground.

@callmetony1319

6 ай бұрын

The assailants from the 2021 "CIT video" from Pretoria were using cellphone jammers, that's why when Leo Prinsloo told his partner Lloyd Mthombeni to "phone Robbie, phone Josh", he couldn't get through.

@jimbotron70

6 ай бұрын

I bet especially some demographic group in particular does that...

Fantastic video mate - you should have your own TV show as well

2:02 This gave me a giggle especially as you tickle your hood 😂…excellent video and very helpful to make folk aware..73’s

Great information Andy 👍

You got the relay attack details slightly wrong. The car transmits on 125kHz, and it is this signal that is relayed to the portable antenna, The keyfob receives this and then replies on 433MHz, which has plenty of range to get to the car as it's also used for the keyfob pushbutton modes. The reasons for using 125kHz are that the range is limited and very predictable ( limited to area around doors and driver seat), and it can be received with near-zero quiescent power draw in the fob.

@andykirby

7 ай бұрын

I don't think that's correct as why would there be a challenge & response visible on the keyfob UHF frequency when you press the start/stop button? I do know my car also has a method to start it using RFID but you have to hold the keyfob very close to a section on the steering column in order for it to energise. Passive 125khz RFID has a super localised range of maybe 10cm, that's not what's being used here. I find it hard to beleive its possible to do a long range passive RFID scam because the transmission distance of the fob is so short, it could be possible thiugh, I have seen videos of thieves with a very large wire antenna. In my car though it is active RFID which is in the UHF range. Passive RFID I think is used in cars that have a physical key inserted into the ignition,, then that key by nature can be very close to a reader all the time as it remains in the ignition.

@mikeselectricstuff

7 ай бұрын

@@andykirby What you are seeing when you press start/stop is the keyfob's 433MHz response ( possibly duplicated) Yes, normal car immobiliser keys are passive RFID but keyless entry systems are not - they use the same frequency but a larger antenna than the coil round the ignition key, and active receiver in the fob, which returns a signal via 433MHz UHF. 125kHz with a moderately high transmit power available from the car battery plus an active receiver in the fob can easily do a metre or so - cars typically have at least one antenna at each door & boot, and at least one around the drivers seat. The fob uses an inductive antenna (often 3 coils at right-angles to each other) tuned to resonate at 125khz, which can produce enough voltage directly from the received signal to wake the fob's control chip without any active receive power draw when idle. It is not practical to make a continuously-listening 433MHz UHF receiver running off a fob's coin cell - it would draw too much power for sensible battery life. The backup starting method does use conventional RFID - the chip in the fob can act as a passive RFID transponder if the battery is flat.

@andykirby

6 ай бұрын

Understood, useful information thank you.👍🏼

@honestlocksmith5428

5 ай бұрын

​@andykirby It's important to note that information on this topic can vary by manufacturer and by the function being performed. IE, opening the door using the fob vs starting the vehicle. There are some interesting vulnerabilities in fobs and the replay and relay attacks require zero understanding of the vehicles security system and only operational knowledge to carry out the attacks. Having said that, the popularity of the topic of car hacking is growing due to flipper zero videos. Once they know what people in my profession know, vehicle theft will be a lot worse.

Presumably they could send a 'wake up' from the car to the fob to get the fob into an active mode thats ready to phase-lock the challenge signal, then issue a challenge and get a response with very predictable latency... the car could then use phase discriminator to ensure there's a direct path with no repeaters. Perhaps that's not reliable in the ISM, but it's surely possible at higher frequencies. Perhaps in the 23cm band and above. Demodulating and remodulating does take a little time and introduces phase shifts - so I'm sure this could be a valid thwart for relay attacks.

Greetings from the US , I have tested the faraday pouches and they do work. they make them with pocketbooks , purses and wallets as well to protect credit card chip readers as well. One thing I did is installed a aftermarket remote relay and put it on my fuel pump module b+ and hid it the the car so I can cut power to the fuel pump. so they might get in and start my car but its not going to drive anywhere and now the are sitting there with a disabled car and most likely want to flee very quickly . Next up , I think I will in addition cut power to the receiver if possible while leaving the alarm active ,so the car will not talk at all . One night my car was parked away from the cars in the supermarket parking lot and a couple of guys parked next to it . I remote started it which change the code on them and they seen me coming and drove off , that's what started this project for me . another min and my Corvette might have been gone.

Andy, this was news ten years ago. The car makers all denied it. Then they formed a 17 manufacturer group to investigate solutions. That was over six years ago, and they've done nothing yet. Rolling code technology was in widespread use ten years before these hacks--but never used by the auto makers. Mercedes used to make at least one model where the key fob had to be inserted in the dash to start it, because that was a separate infrared coded system, like a tv remote.

very interesting and informative video..keep up the great work!

Thank you Andy, another great video 😂😂❤❤❤

A pad with a few thousand volts on the door handle is also an effective deterrent. Don't do it though - it's illegal (or make sure you have an effective way of disposing of the smouldering trash afterwards!). Thanks, Andy. Good tips.

Great video mate and quite an eye opener.... didn't know about the Bluetooth though 😮

Im thankful my 2012 Audi doesn't have keyless ignition or keyless entry at this point, the key has to be in its hole in the dash for the car to start. Great video, very insightful.

It does not matter when electronics always have the small bits to hack. Awesome video

Excellent video, My paranoia has just gone off the scale! :-)

I'm surpsied thag the custom firmware for the K5/K6 doesn't include a replay option

Hi ya Andy...what model is the radio you have an is it standard...?...is the spectrum display in the factory menu?.. P.s love the videos

Andy, Are you a Paul Van Dyk fan ? Guessing by that ending song you've made, Yes... Love it... I want more 🙏👍👍👍👌

Another interesting update cheers Andy

Thanks for an interesting and enjoyable video... Yet again we see "another" example of the eternal struggle between convenience and security... And as is almost always the case security looses out...... How much extra do I have to pay to make my car only open lock and start using the physical key ?? (and Yes I know that "key locks" can be easily picked, but I'd still prefer and trust it more in today's "climate") Best regards. :)

This does not only apply to cars. I was fitting CCTV to my house and using a Baofeng uv-5r to call to the wife who was at the monitor to ask if it was aligned correctly, the radio knocked out the the recording box and had to be restarted each time...

@W8RIT1

6 ай бұрын

I suspect that was from a different issue, like RFI, just good ole plain interference....doesn't have to be on frequency, like lightning. That coax cable for the CCTV cameras acted like an antenna, especially for a "dirty" modulated radio like a Baofeng.

@CM-mo7mv

6 ай бұрын

maybe some interference, however you have to be also wary of deauthing on wifi CCTV.

Empty Smash tubs are good for sheilding the signal of the fob. Although some foil under the lid as it's replaced gives total sheilding. I know it's messy but it works. My little lad made me one and decorated it. It's pretty cool really.

Cheers Andy top notch info 👍

This is such crucial, interesting and easy to understand information, you tube will probably take it down.

Nice content. Love the tinySA!

LOL, as an RF tech I was interested in the content, but the highlight was your ending track :)

Everything that exists that was designed to be accessible in any way at all, is hackable. There are no exceptions.

This felt like a behind the scenes of a real life Gone in 60 seconds.

@W8RIT1

6 ай бұрын

Try 30 seconds. Watch this YT video of 2 car thieves stealing a Mercedes with a SDR. kzread.info/dash/bejne/faB6squndtvQprw.htmlsi=QYjSkM72TpCtfuoK

A nice locking steel bar through the steering wheel helps, too, if they get in, they cannot steer it!

@flyingdoctor99

7 ай бұрын

or they cut the wheel and replace it for selling the car, or they just sell the parts. A steel rod on your steering is lost after at least 5 seconds

@timmack2415

7 ай бұрын

A hacksaw and 20 seconds to cut the steering wheel takes care those. There is a hollow metal tube inside the steering wheel that is simple and easy to cut and the device slips right off. Your best bet is a hidden kill switch. It only costs a few dollars and 20 minutes to install. Cutting power to the ignition or the fuel pump won't allow them to start the car.

@dougtaylor7724

7 ай бұрын

When I leave my truck in a forest and backpack for a few days, the fuel pump relay is in the pouch with the keys. Takes 20 seconds to pull out.

@sw6188

6 ай бұрын

That was a good idea before the development of battery operated angle grinders with cut-off wheels. Those locks can be removed in a matter of seconds.

its worth noting that some cars with rolling codes are vulnerable to replay attacks so long as a valid code has been captured' and that code has NOT been seen by the vehicle. this is why jamming is so effective. By jamming the fob, and capturing the code, then letting the next code hit the car, the previous code is not marked invalid. so now, all that is left is to replay it. I personally lookup the fccid of a device first because that will tell you what frequency it works on.

When these key fobs were first introduced there were many incident where car parks that house a 70cm repeaters had reports of cars being un-lockable because of the repeater. Silly frequency to choose for key fobs.

@andykirby

7 ай бұрын

I can see that totally.

@Ayrshore

6 ай бұрын

When Lothian and Borders police first went to Airwave, there was a spate of cars (Rovers and Metrocabs) that if switched off near the police HQ, wouldn't restart unless you towed them a mile or so away. Those used to use the alarm to immobilise the car, rather than the LF/RFID stuff that's the norm now.

@davidjowett8195

6 ай бұрын

@@Ayrshore I can see that happening if there was an AW base station on the roof. Although in a different part of the spectrum, there would be enough power to swamp the basic receiver for the immobiliser.

@Ayrshore

6 ай бұрын

@@davidjowett8195 Exactly. The receiver in the Lucas stuff Rover Group used was garbage.

@Bond2025

5 ай бұрын

I used to get locked in and out of a Land Rover going to one PMR site in Wales, the RF was so strong on UHF it swamped the car!

I think that the challenge from the car to the key is on a different frequency (150khz?) much lower and low power to limit the range to inside the car, the signal on the tinysa is the response from the key to the car. Also my Tiguan disables keyless unlocking by pressing lock on the key followed by a touch on the lock point on the door handle. VW have introduced a movement sensor in latest keys that put them to sleep when stationary for a period of time so they cannot respond to this type of attack.

Andy - you need to beg, steal or borrow and review a HackRF + Portapack! What the Flipper gains in portability the HackRF surpasses in flexibility. I just know that this beast would be right up your street! Of course I would never condone illegal use of these but it is scary that a modern day "coat hanger" could be as effective if not more so - education is the key here as it empowers owners to become more aware and take precautions where possible. P.S Yes Faraday cages do work at medium range.

@Bond2025

5 ай бұрын

You still can't do much with the HackRF and Portapack, it's just a Flipper on steroids.

Fit an ignition switch from an old model on the steering column from an earlier audi , the steering shaft , and column assembly is the same , since you are only using the mechanical lock it is fairly easy .

My old (06) Lexus fob has a inbuilt feature so that the transmitter signal can be turned off completely. initially designed to save battery power when not in use and nowadays makes a nice little security feature.

Great Video Andy

Very interesting. Seems to me like older cars that have rolling codes but the keyfobs don't receive a signal from the car are more secure. I always felt uncomfortable with cars that auto unlock when you approach them. My OCD makes me check the door handle multiple times so I know it's locked.

@rylanbrowne5658

6 ай бұрын

Same

Very good informative and entertaining video as always 4:30

The faraday pouches do work or at least the ones I have from amazon, that I got four years ago when I got my vehicle. I also got a good quality steering wheel lock so any potential thief has to get past that in order to drive off. Just a few days ago I found that bluetooth can reach over 50 meters, I was at one of these parcel boxes at the local super market and had trouble with the QR code so rang the number, my wife was in the car and had the radio on and when I dialled the contact number I heard the phone ring from the car as my phone was still linked to the car even at 50 odd meters, so any car that uses a blue tooth app is really vulnerable.

Very Interesting Andy.

My recommendation would be to keep the key fob in a lead container when not in use. But you have covered that with the metal box mentioned in your vid.

I moved to spain 15 years ago. First thing i did was put an alarm in my car. Now i find it amusing you need one. I ocassionally forget to lock the doors at night here and dont bother to get out of bed if i remember. I leave the shed door open most nights. Frequently go out for the day with the shed door wide open. There are some advantages to not living in a country full of hooligans

@dougtaylor7724

7 ай бұрын

I once visited a country town out in the middle of nowhere. We rode around with some girls. It was 1979. I forgot to lock my car. I said if we are going to be gone long, I need to lock my car. One of the girls said if you go back and somebody sees you walk over and lock the car and walk away the locals will take great offense. I should have moved there now that I think about it.

@spr00sem00se

6 ай бұрын

@@dougtaylor7724 yeh i live in a small village, probably more like a hamlet, everyone know who everyone is, like there are literally 40 or 50 houses. I have padlocks on the shed doors etc, but I literally never shut them, theyre just there to give the appearance of being locked. I dont htink it would enjoy living in a city again .

It is possible to swap someones car too. You get a rental the same, swap the number plates and all contents with the target after getting a second set of keys made, and stuff the key under the dash. Any key will now start the car, and you report the car stolen. After a while the police will pull the person over and check the VIN which wont match so now the target has a LOT of explaining to do. Revenge.

Thanks for putting this information on you tube and telling how to do it.

I have a 2023 Kia Telluride and "I think" its beaten the odds. Yes, it has all of the vulnerabilities of the key fob you outlined...but only IF you use the keys...which I don't (they are stored in my home in a faraday box that I have tested and it works). . I put the digital key on my cell phone, which works just like a contactless credit card/RFID communication. So ultra short range and its only active when the key is displayed on the screen...which is even safer than credit cards which can be activated at any time if someone got close enough to you. The car unlocks when you have he key displayed on your screen and touch your phone to the door handle. To start the car, you have to place the phone in a certain position while the key is displayed and voila the car starts. Short of hotwiring the car (if thats still a thing) or breaking into my home and taking the actual keys that I never use, I don't see a way they could steal my new Kia Telluride...though I guess this is my chllenge to Andy to see if I am being overly bold in my positivity. :-)

Faraday pouches work very well. The two I tried off Amazon at least.

Your TinySA won't pick up the 125kHz signal from the car to the fob when you pull the handle

Love the vids and tunes lad...is there anything you cant do?? Where can u buy this for 20 quid ??

Thats why i have a dedicated secondary fob style immobiliser and a tracker + subscription and a few other visual items. In the driveway video, a faraday pouch would help.

@threeMetreJim

6 ай бұрын

Moving the fob away from hanging behind the door would help too. The fob to car range is very short for automatic unlocking when you are by the vehicle. If you hang it behind the door (a common place) then forget to lock your door, that is just another way to have the car stolen; if you see videos of people police are looking for, trying doors on a street, it is likely that they are going for car keys rather than burgling while the occupants are home - more gain, less risk.

Great info!

I love radios, learn something new today, thank you... 73's btw: love the music♪♫♪

There is a specific auto gate manufacturer out here who's fobs are also able to block vehicle fobs from operating. I always, always stand at my car to check that it's locked, not only that, but, most modern vehicles are able to unlock only the driver side door without the others, a double tap opens the rest, I've had to educte people here as to why they should rather enable and that feature, if not, you may find yourself at gun point inside your car from an uninvited passanger...

Which firmware is that? I appear to have the same one but under the frequency number (when in scan mode) I don't have those three series of 4 digits. And it doesn't reliably lock in to my key fob signal. Either I have a slightly different firmware or I need more info on how to operate that particular firmware properly. lol

@railfanphill

7 ай бұрын

I believe he's using the firmware labeled uv-k5-firmware-fagci-mod-v1.1.2-SSB-lite-test.bin

@brazoon1

7 ай бұрын

Someone replied to my comment but you seem to be sh@dow banned or something as your reply isn't visible.

Love the music at the end thank you

Ford developed a key that goes to sleep if there is no movement of the key. Simple ideas are the best.

Great video, but I think you missed one of the attack scenarios - they will typically use something to block the signal, as per the start of your explanation. When doing that, they can then sniff the alarm fob when the person tries to unlock the car and store it for later (multiple unlock codes are valid at the same time). They will then follow the target vehicle and wait for it to be parked up and locked, then use the saved code to open the car. They then don't have to damage it and just need to get the car started.

@mjh5437

6 ай бұрын

Criminals will be delighted to hear your advice......You think they don`t watch this stuff or what?

@JohnBaxendale

6 ай бұрын

@@mjh5437 I know about it because the criminals have been doing it for decades, I'm not teaching them something new 😂

On our dodge caravan, you have to actually be pressing the button to get it to unlock. But this is scary though because even my baofeng uv5r could theoretically be used to jam the key fob.

Leyton should have a sleep mode. It’s quite easy to implement. If you can have gyros on a drone FC & game pad then why not in a key fob!? Basically a few mins of inactivity and it’ll shut down its ‘request packet’ what do you think?

Theirs some nice cars around here, i guess I will have to get a radio 😮😅😅 kidding. Ive never seen this before, its crazy. Cheers Andy

Interesting to see someone do this with an HT. There are a number of products on the market that people can use for this beyond the Flipper. It is fairly well known that most devices work on the same frequencies and often use the same modulations. Simply put, radio, wifi or BLE security is a farce. Awesome video. 👍

@Bond2025

5 ай бұрын

The Flipper is an over-rated expensive toy, no one that buys them ever knows what to do with them when they get delivered. They copy their own office access cards/fobs, read a credit card which they can't use from the flipper, maybe clone a garage door opener, that's it. I have never seen anyone use one for anything remotely interesting. They are handy for testing, that's it. Definitely not used in car thefts.

@DirtyPlumbus

5 ай бұрын

@@Bond2025 people have created a panic around the Flipper. Between ignorance and fake videos people drastically overestimate the threat it poses. It's actually been a fantastic tool for bringing awareness to our lack of security. The latest claims are that BLE spam can interfere with critical medical devices like pacemakers and insulin pumps, things that shouldn't even be possible with approved medical devices. With coding knowledge and add on boards it's capable of alot but the worst I've seen is temporarily disabling iPhones due to their poor protocols. A flaw which I believe they've claimed to have fixed.

MBs newer key fobs deactivate after a few minutes and wake up with motion to help mitigate this. Also, MB fobs since the introduction of keyless entry have been bale to be "deactivated" by double tapping the lock button on the key fob. This puts the remote to sleep and will only strat to transmit once a button is pressed on the remote to activate it again. Unfortunately most owners dont know or utilize this second feature.

I've got a Kia and I have a remote for it. My key has to be in the car to start it and warns me if I get out of the car with the key and the engine is running. My car also has buttons on the door handles. so if I walk up to the car with the key on me, the interior light comes on, but the car doesn't unlock. If I press the button on the door, the car unlocks. This is the way i usually get in and out of my car. So would that device pick this up or would the button not be sending a signal? Hope this all makes sense. I'm also going to buy one of those boxes now to put my keys in when I get home so the signal won't get out.

I really dig the closing track!

@andykirby

6 ай бұрын

Thanks! My album is at. www.cloudsto.com/store/music-1.html

Great video

Awesome vid. Gained a sub. :)

Andy, does the radio come with the spectrum screen or is a hack? Nice video, thanks for the upload.

@andykirby

6 ай бұрын

Thanks 👍🏼 It's a feature of Fagci firmware.

Many modern car key fobs use rolling code technology, which generates a different code each time the fob is used to unlock the car. This enhances security by making it more challenging for potential intruders to intercept and replicate the signal.

@laulaja-7186

6 ай бұрын

A rolling code blocks sophisticated replay attacks yes. But the simpler idea is for the attacker to jam all remote locking and watch for those car owners who don’t check to notice that their remote locking attempt has failed. A rolling code doesn’t help in a simple jamming scenario.

@noname-jr9bk

6 ай бұрын

@@laulaja-7186 To prevent attackers from blocking car fob signals, manufacturers often implement anti-jamming technology in their keyless entry systems. This technology detects interference and adjusts the frequency or signal to avoid potential disruptions.

@JohnBaxendale

6 ай бұрын

@@laulaja-7186It doesn't really block them. The car has to have multiple codes active at once (else an accidental press of the button would mean the car and fob were out of sync and you'd no longer be able to unlock the car). Thieves know this and will jam the car so they can capture a working code (as you press the button multiple times to unlock it). They then let you open and drive away the car, follow you and wait for it to be parked - then replay the earlier saved code (which is still active in the car) and drive your vehicle off.

Always watch to see your indicators flash when leaving the car after setting the alarm. Fit an independent "Thatcham grade 3 alarm system" to the car your insurance will be lower and the car will not be able to be driven away. The alarm will also sound depending on how set up if the door is opened after a short delay if not disarmed separately. Even in a workshop very difficult to remove the alarm system even for an auto electrician talking hours!

I am amazed what this lil radio accomplishes... ;)

On VW with keyless entry, if you lock the car with the key-fob lock button, then touch the dimple on the door handle within 5 seconds, it disables keyless entry until the next time you unlock the car (using the unlock button on the key fob)

What device did you use and where did you buy it? My car is hacked all the time.

When I was younger I used to have a tiny universal remote. It was designed for TV use. It had a useful feature where you could get it to turn on or off at the time you set or switch to a different channel. It could also learn the code from car key fobs which I tested and it worked. I think this must have been before they switched to changing codes each time. I might have bought it from the innovations catalogue or something like that.

Good luck sir 🎉

Hell yea, I loves this content

Also for rolling codes, they could capture the first signal while blocking it and the second press will send the first signal, keeping a spare in memory

I had a car that you could remove the key from the door with the lock barrel not fully returned home, meaning it would Unlock with an ice block stick. But with our sort of gear could we not block multiple vehicles over a wide area? Then we can go into business selling car alarms that work😂!

I have tested a pouch, cant verify all on ebay wirk but the one i got does. Fairly low tech so youve been proper scammed if it doesnt work. Same with rfid blocking sleavea for cards, they work too. Rolling codes wise, Subaru's (used to, been a while since we i was researching this) incremened the code by one. You you could convert the transmission to binary then denary and workout the next cide easily.. or brute force from the code you caught very quickly.

Very interesting !

Capturing a signal from a fob and replaying it may de authorize / unsynced you fob that may have a rolling key. You will need to take your key and get it reprogrammed...may need to get the car towed at a dealer also. Most of these attacks are for high valued cars.

My motorcycle has "keyless" ignition just stand near it and the ignition/lock knob works. The keyfob has an on/off switch too, so simple.